On Wed, 2011-01-05 at 11:14 +0000, Daniel P. Berrange wrote:
> There's no general library that I'm aware of that'd be suitable.
> In addition to the general access control solution, we'd like to
> expand our SELinux support to cover MAC of the entire API (kinda
> like SEPostgreSQL).
That's a very grand vision, but it is an awful lot of work when the
feature request is just access control on the VNC screens.
Am I better off just using accessing the qemu monitor out of band?
Rgs
Neil